This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: PghpioSM/A19p3SKBIn1W8cb8PupCIXi3APZzFalPD8= Subject key identifier: 70:74:F8:83:FC:8C:F4:4B:A4:99:B3:45:2D:F2:18:75:A1:0C:B3:E1 Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 0413 Signing time: Thu 04 Dec 2025 22:52:41 +0000 Manifest this update: Thu 04 Dec 2025 22:52:41 +0000 Manifest next update: Thu 11 Dec 2025 22:52:41 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: 2WKMJiwM+1EjnebqoUWlLmT5RQBnvaZeFsBl/B7BHUE=) 2: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: TEe1vP6DRB8YT8k0USYkc2bmS+7dNHehlpCLdcwXNpM=) 3: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: nBxVvzmtBqkJjIM89kDyeNDRTPleOjC1xfsXd7rUY30=) 4: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: XGuuKVGIEltroOkaLIfkXvo4+Qd8e1UxzERGE1Xa7EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Dec 4 22:52:41 2025 GMT Not After : Dec 11 22:52:41 2025 GMT Subject: CN=693210b9-5cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:95:84:92:ad:51:7e:9d:4a:d4:37:49:b7: dd:89:83:2a:e7:62:db:70:eb:91:e4:31:a2:6f:49: 5b:7f:65:9c:53:d7:95:6f:5d:6d:75:a9:d0:0a:cd: 3e:db:57:bc:f9:06:61:11:04:25:63:a0:2b:8b:e7: d5:36:37:c9:80:f5:e8:86:a0:13:8c:26:22:0c:13: c3:f5:20:79:18:38:92:48:a5:b4:82:da:0b:a0:51: 9a:86:ec:ef:20:50:90:c2:4b:7d:a1:48:aa:47:0c: 4d:78:74:d4:fe:6f:72:5a:84:cb:9e:cf:a1:c3:b3: 22:9f:96:c3:30:b5:0c:82:1c:0e:b4:77:e7:18:6c: e2:42:d6:d7:2d:5c:2f:6c:10:14:d8:ee:6f:f5:7c: fb:4c:71:de:91:7a:97:79:b4:ff:93:44:16:f7:cf: 65:6a:d6:5c:e0:69:a6:da:21:ca:e3:c8:8a:c7:2c: e8:13:eb:48:23:9c:f5:5d:63:85:c1:80:72:48:63: 22:97:71:7c:05:a8:9a:db:a5:33:ef:67:ea:a5:62: 37:26:8b:1e:85:4f:45:ee:3a:75:a0:25:3c:ea:d6: 98:cf:d9:79:fb:4a:8c:bb:35:9e:d1:15:20:67:3c: 73:a0:85:6a:e5:03:cd:38:ff:f3:85:6e:0b:a6:3d: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:74:F8:83:FC:8C:F4:4B:A4:99:B3:45:2D:F2:18:75:A1:0C:B3:E1 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:c8:42:4f:50:fc:16:ee:c2:d2:99:a3:a6:fb:3c:50:4b:0a: 11:8d:6d:cf:79:04:43:e7:f5:51:74:77:75:c5:af:2a:f1:68: 9b:6a:37:9b:1b:3b:9b:9b:c0:63:c0:42:42:26:eb:f3:91:8d: 41:28:06:0c:de:6b:d8:55:ea:13:ee:b3:37:34:49:3e:5f:b6: a7:3f:1f:da:12:fc:d5:c1:3d:f1:26:ee:2d:f8:0d:9b:cb:32: 59:f7:77:de:c2:1c:fe:81:f7:17:81:8d:57:6b:7d:a7:51:3a: 24:cb:c6:48:fd:3e:a4:48:c2:9a:42:70:33:a7:7a:4d:db:e9: 99:f1:3e:cc:9d:91:41:01:4c:05:bf:ad:e2:e1:8f:b1:4d:c3: ad:c1:6c:e0:ac:b9:5f:7e:5c:a3:6e:6a:fc:9a:0e:36:b7:1d: 2d:d4:48:c6:4c:1d:23:25:b9:0d:4f:14:71:ab:ca:42:16:35: 0c:7b:2d:07:f3:a2:87:ef:d2:72:90:91:61:97:69:02:6c:6d: e5:95:87:97:e7:43:8c:98:9a:8f:b0:c8:96:b9:c6:57:6a:5f: f3:57:e5:29:2f:7c:da:74:5e:dd:d6:d4:30:a4:e5:8b:e6:ed: 46:ae:f6:38:6a:ed:50:5d:1f:0a:da:50:9c:53:6a:d8:cb:4e: a7:a3:2a:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjUxMjA0MjI1MjQxWhcNMjUxMjExMjI1MjQxWjAYMRYwFAYD VQQDEw02OTMyMTBiOS01Y2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptKVhJKtUX6dStQ3SbfdiYMq52LbcOuR5DGib0lbf2WcU9eVb11tdanQCs0+ 21e8+QZhEQQlY6Ari+fVNjfJgPXohqATjCYiDBPD9SB5GDiSSKW0gtoLoFGahuzv IFCQwkt9oUiqRwxNeHTU/m9yWoTLns+hw7Min5bDMLUMghwOtHfnGGziQtbXLVwv bBAU2O5v9Xz7THHekXqXebT/k0QW989latZc4Gmm2iHK48iKxyzoE+tII5z1XWOF wYBySGMil3F8Baia26Uz72fqpWI3JosehU9F7jp1oCU86taYz9l5+0qMuzWe0RUg ZzxzoIVq5QPNOP/zhW4Lpj2/hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB0+IP8 jPRLpJmzRS3yGHWhDLPhMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5yEJPUPwW7sLSmaOm+zxQSwoRjW3PeQRD5/VRdHd1xa8q8Wibajeb Gzubm8BjwEJCJuvzkY1BKAYM3mvYVeoT7rM3NEk+X7anPx/aEvzVwT3xJu4t+A2b yzJZ93fewhz+gfcXgY1Xa32nUToky8ZI/T6kSMKaQnAzp3pN2+mZ8T7MnZFBAUwF v63i4Y+xTcOtwWzgrLlfflyjbmr8mg42tx0t1EjGTB0jJbkNTxRxq8pCFjUMey0H 86KH79JykJFhl2kCbG3llYeX50OMmJqPsMiWucZXal/zV+UpL3zadF7d1tQwpOWL 5u1GrvY4au1QXR8K2lCcU2rYy06noyro -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:10 2025 by rpki-client